预防PHPDDOS – iptables规则

iptables -I OUTPUT -p udp --dport 53 -d 222.172.200.68 -j ACCEPT
 
iptables -I OUTPUT -p udp --dport 53 -d 61.166.150.123 -j ACCEPT
 
iptables -A OUTPUT -p tcp -m tcp --sport 1024:65535 -d 222.172.200.68 --dport 53 -m state --state NEW,ESTABLISHED -j ACCEPT
 
iptables -A OUTPUT -p tcp -m tcp --sport 1024:65535 -d 61.166.150.123 --dport 53 -m state --state NEW,ESTABLISHED -j ACCEPT
 
iptables -A OUTPUT -p udp -m udp --sport 1024:65535 -d 222.172.200.68 --dport 53 -m state --state NEW,ESTABLISHED -j ACCEPT
 
iptables -A OUTPUT -p udp -m udp --sport 1024:65535 -d 61.166.150.123 --dport 53 -m state --state NEW,ESTABLISHED -j ACCEPT
 
iptables -A OUTPUT -p udp -j REJECT
 
/etc/rc.d/init.d/iptables save
 
service iptables restart
 
chkconfig iptables on